# Become admin

**URL:** https://meta.discourse.org/t/become-admin/340308
**Category:** Feature
**Created:** [December 4, 2024, 7:43am UTC](https://meta.discourse.org/t/become-admin/340308 "2024-12-04T07:43:08Z")
**Posts on this page:** 1
**Showing post:** 3

<div class="post-metadata">

### Author: ![hellekin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/hellekin/32/51636_2.png) [@hellekin](https://meta.discourse.org/u/hellekin)
#### Post date: [December 4, 2024, 8:32am UTC](https://meta.discourse.org/t/become-admin/340308/3 "2024-12-04T08:32:05Z")

</div>

I can see how it is similar, yet there are issues in the other discussion that relate to the issue here:

> [@"Regular mode" for admins and moderators (e.g. something like "sudo")](https://meta.discourse.org/t/regular-mode-for-admins-and-moderators-e-g-something-like-sudo/211617/9):
>
> part of being an admin is understanding the responsibility you have and the boundaries you must respect. If you can’t do that, you shouldn’t hold admin privileges.

Except that, when you’re admin, you have no way of seeing that a link to a confidential conversation your normally would not have access to is actually off-limits. This is only _one_ case (that occurred to us yesterday and prompted me to start this topic) where the non-separation of admin and participant can be problematic.

Moreover, I see that the Discourse team has a habit to be all admins, which makes a horizontal superpower, and does not help, as a culture, to differentiate between normal usage and privileged usage. Not all communities are horizontal, sometimes the tech people who have administrator privilege should not be trusted with everything on the forum, and that is not an edge case: it’s been built in computer systems since the beginning that `root` can see and do everything. Privilege certainly comes with responsibility, but sometimes benevolence is not enough especially when one cannot distinguish between okay and off-limits.

Although the “use another browser profile” solution to handle a normal and admin account, it is not very practical, especially as we all get used to have the tools at hand. Firing up a new browser each time an admin feature is needed can be very annoying (not everyone likes nor can afford to having idle resources taken on their machine). It also does not prevent the prying eyes privileged BOFH situation from happening.

> [@"Regular mode" for admins and moderators (e.g. something like "sudo")](https://meta.discourse.org/t/regular-mode-for-admins-and-moderators-e-g-something-like-sudo/211617/6):
>
> I don’t want to be able to accidentally violate intended tagging rules. (Are non-admin moderators also able to accidentally do this? I can’t easily test, even.)
> 
> I could create a separate admin account and demote my main one to a regular user, but I’m afraid I’d miss important flag notifications and messages.

> [@"Regular mode" for admins and moderators (e.g. something like "sudo")](https://meta.discourse.org/t/regular-mode-for-admins-and-moderators-e-g-something-like-sudo/211617/10):
>
> Well, it’s kind of like the same thing as running as root on Linux system all the time. It’s not just respecting boundaries, but not accidentally walking over them when you don’t realize they’re there.

> [@"Regular mode" for admins and moderators (e.g. something like "sudo")](https://meta.discourse.org/t/regular-mode-for-admins-and-moderators-e-g-something-like-sudo/211617/11):
>
> I understand the concern, but it isn’t a huge issue in practice

Times change. Here, we have an admin who accidentally accessed confidential information that affected the life of other people, and they were not supposed to. This is privacy breach. It’s a security issue.

> [@"Regular mode" for admins and moderators (e.g. something like "sudo")](https://meta.discourse.org/t/regular-mode-for-admins-and-moderators-e-g-something-like-sudo/211617/12):
>
> Even though that logic is mostly centralized in [`guardian.rb`](https://github.com/discourse/discourse/blob/main/lib/guardian.rb#L14) and [`/lib/guardian/*.rb`](https://github.com/discourse/discourse/tree/main/lib/guardian), the complexity and bug potential for such a change would be very large, and the necessity of this feature would need need for far outweigh that, which it doesn’t, given the alternatives.

I understand the potential complexity, but the core issue remains and should probably be solved one way or another. IMHO, it would be useful to revisit the question now that the code base has matured, and evaluate whether the proposed approach would be doable.

> [@"Regular mode" for admins and moderators (e.g. something like "sudo")](https://meta.discourse.org/t/regular-mode-for-admins-and-moderators-e-g-something-like-sudo/211617/18):
>
> I assume that OP meant to work most of the time as a regular user. For me, I want to feel myself as a simple user too:
> 
> - less buttons
> - no access to moder/admin actions
> - use simple user cases
> 
> After upgrades or tune, I would like to interact with the forum as regular user see it to avoid misunderstands.

> [@"Regular mode" for admins and moderators (e.g. something like "sudo")](https://meta.discourse.org/t/regular-mode-for-admins-and-moderators-e-g-something-like-sudo/211617/19):
>
> It reminds me of something that occurred a few days ago. I’m in the process of migrating a forum.

Yes! Having warning and guards about this kind of (trespassing) issues would be useful.

* * *

On existing plugins:

- [GitHub - discourse/discourse-anonymous-moderators · GitHub](https://github.com/discourse/discourse-anonymous-moderators) might be useful, but a recent change handling email ([Enabling e-mail normalization by default](https://meta.discourse.org/t/enabling-e-mail-normalization-by-default/338641)) may change that – relying on no default settings may prove problematic.
- [GitHub - discourse/discourse-staff-alias: Allow staff users to post under an alias · GitHub](https://github.com/discourse/discourse-staff-alias) is only limited to _posting_.

I’d rather have a really clean separation between participant and admin using the classical and well-known _sudo_ metaphor, for all the reasons stated above.

---

_[View the full topic](https://meta.discourse.org/t/become-admin/340308)._
